CVE-2011-4880

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in the web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 allows remote attackers to read arbitrary files via a crafted HTTP request.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-01.pdfUS Government Resource
http://www.us-cert.gov/control_systems/pdf/ICSA-12-102-01.pdfUS Government Resource

Timeline

Published: Apr 13, 2012
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-48815.0The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly check return values from functions, which allows remote CVE-2011-48825.0The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 allows remote attackers to cause a denial of service (application exit) v CVE-2011-48835.0The web server in Certec atvise webMI2ADS (aka webMI) before 2.0.2 does not properly validate values in HTTP requests, which allows remote a CVE-2011-48855.0PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allo CVE-2011-48874.3Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere W CVE-2011-48899.8The javax.naming.directory.AttributeInUseException class in the Virtual Member Manager in IBM WebSphere Application Server (WAS) 6.1 before CVE-2011-48904.0The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to cause a denial of service (daemon crash) vi CVE-2011-48944.3Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection for a directory fetch, which ma CVE-2011-48954.3Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which make CVE-2011-48964.3Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might al CVE-2011-48974.3Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname val CVE-2011-48985.0wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier generates different error messages for requests lacki